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Abstract. This paper provides an induction rule that can be used to prove properties of 
data structures whose types are inductive, i.e., are carriers of initial algebras of functors. 
Our results are semantic in nature and are inspired by Hermida and Jacobs' elegant alge- 
braic formulation of induction for polynomial data types. Our contribution is to derive, 
under slightly different assumptions, a sound induction rule that is generic over all induc- 
tive types, polynomial or not. Our induction rule is generic over the kinds of properties to 
be proved as well: like Hermida and Jacobs, we work in a general fibrational setting and 
so can accommodate very general notions of properties on inductive types rather than just 
those of a particular syntactic form. We establish the soundness of our generic induction 
rule by reducing induction to iteration. We then show how our generic induction rule can 
be instantiated to give induction rules for the data types of rose trees, finite hereditary 
sets, and hyperfunctions. The first of these lies outside the scope of Hermida and Jacobs' 
work because it is not polynomial, and as far as we are aware, no induction rules have 
been known to exist for the second and third in a general fibrational framework. Our 
instantiation for hyperfunctions underscores the value of working in the general fibrational 
setting since this data type cannot be interpreted as a set. 



1. Introduction 

Iteration operators provide a uniform way to express common and naturally occurring 
patterns of recursion over inductive data types. Expressing recursion via iteration opera- 
tors makes code easier to read, write, and understand; facilitates code reuse; guarantees 
properties of programs such as totality and termination; and supports optimising pro- 
gram transformations such as fold fusion and short cut fusion. Categorically, iteration 
operators arise from initial algebra semantics of data types, in which data types are re- 
garded as carriers of initial algebras of functors. Lambek's Lemma ensures that the carrier 
of the initial algebra of F is its least fixed point fiF, and initiality ensures that, given 
any F-algebra h : FA — > A, there is a unique .F-algebra homomorphism, denoted foldh, 
from the initial algebra in : F(pF) — > [iF to that algebra. For each functor F, the map 
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fold : (FA — >■ A) fiF — > A is the iteration operator for the data type fiF. Initial algebra 
semantics thus provides a well-developed theory of iteration which is... 

• ...principled, in that it is derived solely from the initial algebra semantics of data types. 
This is important because it helps ensure that programs have rigorous mathematical 
foundations that can be used to ascertain their meaning and correctness. 

• ...expressive, and so is applicable to all inductive types — i.e., to every type which is the 
carrier of an initial algebra of a functor — rather than just to syntactically defined classes 
of data types such as polynomial data types. 

• ...correct, and so is valid in any model — set-theoretic, domain-theoretic, realisability, 
etc. — in which data types are interpreted as carriers of initial algebras. 

Because induction and iteration are closely linked — induction is often used to prove prop- 
erties of functions defined by iteration, and the correctness of induction rules is often estab- 
lished by reducing it to that of iteration — we may reasonably expect that initial algebra 
semantics can be used to derive a principled, expressive, and correct theory of induction 
for data types as well. In most treatments of induction, given a functor F together with a 
property P to be proved about data of type fiF, the premises of the induction rule for \iF 
constitute an F-algebra with carrier Sx : \iF. Px. The conclusion of the rule is obtained by 
supplying such an F-algebra as input to the iteration operator for \iF . This yields a func- 
tion from [iF to Y>x : fiF. Px from which a function of type Vx : fiF. Px can be obtained. It 
has not, however, been possible to characterise -F-algebras with carrier T,x : fiF. Px without 
additional assumptions on F. Induction rules are thus typically derived under the assump- 
tion that the functors involved have a certain structure, e.g., that they are polynomial. 
Moreover, taking the carriers of the algebras to be S-types assumes that properties are 
represented as type-valued functions. So while induction rules derived as described above 
are both principled and correct, their expressiveness is limited along two dimensions: with 
respect to the data types for which they can be derived and the nature of the properties 
they can verify. 

A more expressive, yet still principled and correct, approach to induction is given by 
Hermida and Jacobs [10]. They show how to lift each functor F on a base category of types 
to a functor F on a category of properties over those types, and take the premises of the 
induction rule for the type fiF to be an F-algebra. Hermida and Jacobs work in a fibrational 
setting and the notion of property they consider is, accordingly, very general. Indeed, they 
accommodate any notion of property that can be suitably fibred over the category of types, 
and so overcome one of the two limitations mentioned above. On the other hand, their 
approach gives sound induction rules only for polynomial data types, so the limitation on 
the class of data types treated remains in their work. 

This paper shows how to remove the restriction on the class of data types treated. 
Our main result is a derivation of a sound generic induction rule that can be instantiated 
to every inductive type, regardless of whether it is polynomial or not. We think this is 
important because it provides a counterpart for induction to the existence of an iteration 
operator for every inductive type. We take Hermida and Jacobs' approach as our point of 
departure and show that, under slightly different assumptions on the fibration involved, we 
can lift any functor on the base category of a fibration to a functor on the total category of 
the fibration. The lifting we define forms the basis of our generic induction rule. 
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The derivation of a generic, sound induction rule covering all inductive types is clearly 
an important theoretical result, but it also has practical consequences: 

• We show in Example [2] how our generic induction rule can be instantiated to the families 
fibration over Set (the fibration most often implicitly used by type theorists and those 
constructing inductive proofs with theorem provers) to derive the induction rule for rose 
trees that one would intuitively expect. The data type of rose trees lies outside the scope 
of Hermida and Jacobs' results because it is not polynomial. On the other hand, an 
induction rule for rose trees is available in the proof assistant Coq, although it is neither 
the one we intuitively expect nor expressive enough to prove properties that ought to be 
amenable to inductive proof. Indeed, if we define rose trees in Coq by 

Node : list rose -> rose 

then Coq generates the following induction rule 

rose_ind : forall P : rose -> Prop, 

(forall 1 : list rose, P (Node 1)) -> 
forall r : rose, P r 

But to prove a property of a rose tree Node 1, we must prove that property assuming only 
that 1 is a list of rose trees, and without recourse to any induction hypothesis. There is, 
of course, a presentation of rose trees by mutual recursion as well, but this doesn't give 
the expected induction rule in Coq either. Intuitively, what we expect is an induction 
rule whose premise is 

forall [r_0, . . . , r_n] : list rose, 

P(r_0) -> ... -> P(r_n) -> P(Node [r_0, r_n] ) 

The rule we derive for rose trees is indeed the expected one, which suggests that our 
derivation may enable automatic generation of more useful induction rules in Coq, rather 
than requiring the user to hand code them as is currently necessary. 

• We further show in Example [3] how our generic induction rule can be instantiated, again 
to the families fibration over Set, to derive a rule for the data type of finite hereditary 
sets. This data type is defined in terms of quotients and so lies outside most current 
theories of induction. 

• Finally, we show in Example [7] how our generic induction rule can be instantiated to the 
subobject fibration over coCPO± to derive a rule for the data type of hyperfunctions. 
Because this data type cannot be interpreted as a set, a fibration other than the families 
fibration over Set is required; in this case, use of the subobject fibration allows us to 
derive an induction rule for admissible subsets of hyperfunctions. The ability to treat the 
data type of hyperfunctions thus underscores the importance of developing our results 
in the general fibrational framework. Moreover, the functor underlying the data type of 
hyperfunctions is not strictly positive [7J, so the ability to treat this data type also under- 
scores the advantage of being able to handle a very general class of functors going beyond 
simply polynomial functors. As far as we know, induction rules for finite hereditary sets 
and hyperfunctions have not previously existed in the general fibrational framework. 
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Although our theory of induction is applicable to all inductive functors — i.e., to all 
functors having initial algebras, including those giving rise to nested types [15], GADTs [21], 
indexed containers [1], dependent types [19], and inductive recursive types [6] — our exam- 
ples show that working in the general fibrational setting is beneficial even if we restrict our 
attention to strictly positive data types. We do, however, offer some preliminary thoughts 
in Section [5] on the potentially delicate issue of instantiating our general theory with fibra- 
tions appropriate for deriving induction rules for specific classes of higher-order functors 
of interest. It is also worth noting that the specialisations of our generic induction rule to 
polynomial functors in the families fibration over Set coincide exactly with the induction 
rules of Hermida and Jacobs. But the structure we require of fibrations generally is slightly 
different from that required by Hermida and Jacobs, so while our theory is in essence a 
generalisation of theirs, the two are, strictly speaking, incomparable. The structure we 
require of our fibrations is, nevertheless, certainly present in all standard fibrational models 
of type theory (see Section 0]). Like Hermida and Jacobs, we prove our generic induction 
rule correct by reducing induction to iteration. A more detailed discussion of when our 
induction rules coincide with those of Hermida and Jacobs is given in Section [H 

We take a purely categorical approach to induction in this paper, and derive our generic 
induction rule from only the initial algebra semantics of data types. As a result, our work 
is inherently extensional. Although translating our constructions into intensional settings 
may therefore require additional effort, we expect the guidance offered by the categorical 
viewpoint to support the derivation of induction rules for functors that are not treatable at 
present. Since we do not use any form of impredicativity in our constructions, and instead 
use only the weaker assumption that initial algebras exist, this guidance will be widely 
applicable. 

The remainder of this paper is structured as follows. To make our results as accessible 
as possible, we illustrate them in Section [2] with a categorical derivation of the familiar 
induction rule for the natural numbers. In Section [3] we derive an induction rule for the 
special case of the families fibration over Set. We also show how this rule can be instantiated 
to derive the one from Section and the ones for rose trees and finite hereditary sets 
mentioned above. Then, in Section H] we present our generic fibrational induction rule, 
establish a number of results about it, and illustrate it with the aforementioned application 
to hyperfunctions. The approach taken in this section is completely different from the 
corresponding one in the conference version of the paper [9], and allows us to improve upon 
and extend our previous results. Section [5] concludes, discusses possible instantiations of 
our generic induction rule for higher-order functors, and offers some additional directions 
for future research. 

When convenient, we identify isomorphic objects of a category and write = rather 
than ~. We write 1 for the canonical singleton set and denote its single element by • . In 
Sections [2] and [3] we assume that types are interpreted as objects in Set, so that 1 also 
denotes the unit type in those sections. We write id for identity morphisms in a category 
and Id for the identity functor on a category. 

2. A Familiar Induction Rule 

Consider the inductive data type Nat, which defines the natural numbers and can be spec- 
ified in a programming language with Haskell-like syntax by 

data Nat = Zero I Succ Nat 
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The observation that Nat is the least fixed point of the functor N on Set — i.e., on the 
category of sets and functions — defined by NX = 1 + X can be used to define the 
following iteration operator: 

foldNat = X -> (X -> X) -> Nat^ X 

foldNat z s Zero = z 

foldNat z s (Succ n) = s (foldNat z s n) 

The iteration operator foldNat provides a uniform means of expressing common and natu- 
rally occurring patterns of recursion over the natural numbers. 

Categorically, iteration operators such as foldNat arise from the initial algebra semantics 
of data types, in which every data type is regarded as the carrier of the initial algebra of 
a functor F. If B is a category and F is a functor on B, then an F -algebra is a morphism 
h : FX —■ X for some object X of B. We call X the carrier of h. For any functor F, the 
collection of F-algebras itself forms a category Alg F which we call the category of F -algebras. 
In Alg F , an F-algebra morphism between F-algebras h : FX — s> X and g : FY — > Y is a 
map / : X — > Y such that the following diagram commutes: 

Ff 

FA —^FB 



f 

A — -^B 

When it exists, the initial F-algebra in : F(fiF) — > fiF is unique up to isomorphism and 
has the least fixed point \xF of F as its carrier. Initiality ensures that there is a unique 
F-algebra morphism fold h : jjlF — > X from in to any F-algebra h : FX —> X. This gives 
rise to the following iteration operator fold for the inductive type //F: 

fold : (FX -»• X) -> //F -> X 

fold h (in t) = h(F(foldh)t) 

Since /oW is derived from initial algebra semantics it is principled and correct. It is also 
expressive, since it can be defined for every inductive type. In fact, fold is a single iteration 
operator parameterised over inductive types rather than a family of iteration operators, one 
for each such type, and the iteration operator foldNat above is the instantiation to Nat of 
the generic iteration operator fold. 

The iteration operator foldNat can be used to derive the standard induction rule for Nat 
which coincides with the standard induction rule for natural numbers, i.e., with the familiar 
principle of mathematical induction. This rule says that if a property P holds for 0, and if 
P holds for n + 1 whenever it holds for a natural number n, then P holds for all natural 
numbers. Representing each property of natural numbers as a predicate P : Nat — > Set 
mapping each n : Nat to the set of proofs that P holds for n, we wish to represent this rule 
at the object level as a function indNat with type 

V(F : Nat -> Set). P Zero -»• (Vn : Nat.Pn -> P(Succn)) -> (Vn : Nat.Pn) 

Code fragments such as the above, which involve quantification over sets, properties, or 
functors, are to be treated as "categorically inspired" within this paper. This is because 
quantification over such higher-kinded objects cannot be interpreted in Set. In order to 
give a formal interpretation to code fragments like the one above, we would need to work 
in a category such as that of modest sets. While the ability to work with functors over 
categories other than Set is one of the motivations for working in the general fibrational 
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setting of Section HJ formalising the semantics of such code fragments would obscure the 
central message of this paper. Our decision to treat such fragments as categorically inspired 
is justified in part by the fact that the use of category theory to suggest computational con- 
structions has long been regarded as fruitful within the functional programming community 
(see, e.g., gj EJUS]). 

A function indNat with the above type takes as input the property P to be proved, a 
proof that P holds for Zero, and a function ip mapping each n : Nat and each proof that P 
holds for n to a proof that P holds for Succ n, and returns a function mapping each n : Nat 
to a proof that P holds for n, i.e., to an element of P n. We can write indNat in terms 
of foldNat — and thus reduce induction for Nat to iteration for Nat — as follows. First 
note that indNat cannot be obtained by instantiating the type X in the type of foldNat 
to a type of the form Pn for a specific n because indNat returns elements of the types 
Pn for different values n and these types are, in general, distinct from one another. We 
therefore need a type containing all of the elements of Pn for every n. Such a type can 
informally be thought of as the union over n of Pn, and is formally given by the dependent 
type Sn : Nat. Pn comprising pairs (n,p) where n : Nat and p : Pn. 

The standard approach to defining indNat is thus to apply foldNat to an iV-algebra 
with carrier Sn : Nat. Pn. Such an algebra has components a : Sn : Nat. Pn and (3 : £n : 
Nat.Pn — > Sn : Nat.Pn. Given <f) : P Zero and ip : Mn.Pn — > P(Succn), we choose 
a = (Zero,(p) and /3(n,p) = (Succn,ipnp) and note that foldNat a f3 : Nat —> £n : 
Nat.Pn. We tentatively take indNat P <p ip n to be p, where foldNat a f3 n = (m,p). 
But in order to know that p actually gives a proof for n itself, we must show that m = n. 
Fortunately, this follows easily from the uniqueness of foldNat a (3. Indeed, we have that 

1 + Nat ^ 1 + Sn : Nat.Pn *- 1 + Nat 



foldNat a 



\(n,p). n 



Nat En : Nat. P n — — - — s- Nat 

commutes and, by initiality of in, that (X(n,p).n)o (foldNat a (3) is the identity map. Thus 

n = (\(n,p) . n)(f oldN at a fin) = (X(n,p).n)(m,p) = m 

Letting ir' p be the second projection on dependent pairs involving the predicate P, the 
induction rule for Nat is thus 

indNat : V(P : Nat -> Set). P Zero -> (Vn : Nat. P n -> P {Succ n)) 

-> (Vn : Nat.Pn) 

indNat P (p ip = ir'p o (foldNat (Zero,<j)) (\(n,p). (Succn,ip np))) 

As expected, this induction rule states that, for every property P, to construct a proof that 
P holds for every n : Nat, it suffices to provide a proof that P holds for Zero, and to show 
that, for any n : Nat, if there is a proof that P holds for n, then there is also a proof that 
P holds for Succn. 

The use of dependent types is fundamental to this formalization of the induction rule 
for Nat, but this is only possible because properties to be proved are taken to be set-valued 
functions. The remainder of this paper uses fibrations to generalise the above treatment 
of induction to arbitrary inductive functors and arbitrary properties which are suitably 
fibred over the category whose objects interpret types. In the general fibrational setting, 
properties are given axiomatically via the fibrational structure rather than assumed to be 
(set- valued) functions. 
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3. Induction Rules for Predicates over Set 

The main result of this paper is the derivation of a sound induction rule that is generic over 
all inductive types and which can be used to verify any notion of property that is fibred 
over the category whose objects interpret types. In this section we assume that types are 
modelled by sets, so the functors we consider are on Set and the properties we consider are 
functions mapping data to sets of proofs that these properties hold for them. We make these 
assumptions because it allows us to present our derivation in the simplest setting possible, 
and also because type theorists often model properties in exactly this way. This makes the 
present section more accessible and, since the general fibrational treatment of induction can 
be seen as a direct generalisation of the treatment presented here, Section [J] should also be 
more easily digestible once the derivation is understood in this special case. Although the 
derivation of this section can indeed be seen as the specialisation of that of Section [J] to the 
families fibration over Set, no knowledge of fibrations is required to understand it because 
all constructions are given concretely rather than in their fibrational forms. 

We begin by considering what we might naively expect an induction rule for an inductive 
data type \xF to look like. The derivation for Nat in Section [2] suggests that, in general, it 
should look something like this: 

ind : VP:/iF^Set. ??? -»■ Vx:(j,F.Px 

But what should the premises — denoted ??? here — of the generic induction rule ind be? 
Since we want to construct, for any term x : fj,F, a proof term of type P x from proof terms 
for x's substructures, and since the functionality of the fold operator for \xF is precisely 
to compute a value for x : [iF from the values for x's substructures, it is natural to try to 
equip P with an F-algebra structure that can be input to fold to yield a mapping of each 
x : [iF to an element of P x. But this approach quickly hits a snag. Since the codomain 
of every predicate P : fj,F — > Set is Set itself, rather than an object of Set, F cannot be 
applied to P as is needed to equip P with an F-algebra structure. Moreover, an induction 
rule for [iF cannot be obtained by applying fold to an F-algebra with carrier P x for any 
specific x. This suggests that we should try to construct an F-algebra not for Px for each 
term x, but rather for P itself. 

Such considerations led Hermida and Jacobs [10J to define a category of predicates V 
and a lifting for each polynomial functor F on Set to a functor F on V that respects the 
structure of F. They then constructed -F-algebras with carrier V to serve as the premises of 
their induction rules. The crucial part of their construction, namely the lifting of polynomial 
functors, proceeds inductively and includes clauses such as 

(fTG) P = FP + GP 

and 

(fxG) P = FPxGP 

The construction of Hermida and Jacobs is very general: they consider functors on bicarte- 
sian categories rather than just on Set, and represent properties by bicartesian fibrations 
over such categories instead of using the specific notion of predicate from Definition 13.21 
below. On the other hand, they define liftings for polynomial functors. 

The construction we give in this section is in some sense orthogonal to Hermida and 
Jacobs': we focus exclusively on functors on Set and a particular category of predicates, and 
show how to define liftings for all inductive functors on Set, including non-polynomial ones. 
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In this setting, the induction rule we derive properly extends Hermida and Jacobs', thus 
catering for a variety of data types that they cannot treat. In the next section we derive 
analogous results in the general fibrational setting. This allows us to derive sound induction 
rules for initial algebras of functors defined on categories other than Set which can be used 
to prove arbitrary properties that are suitably fibred over the category interpreting types. 
We begin with the definition of a predicate. 

Definition 3.1. Let X be a set. A predicate on X is a function P : X — > Set mapping 
each x £ X to a set Px. We call X the domain of P. 

We may speak simply of "a predicate P" if the domain of P is understood. A predicate 
P on X can be thought of as mapping each element x of X to the set of proofs that P holds 
for x. We now define our category of predicates. 

Definition 3.2. The category of predicates V has predicates as its objects. A morphism 
from a predicate P : X — > Set to a predicate P' : X' — > Set is a pair (/, /~) : P — > P' of 
functions, where / : X — > X ' and /~ : Vx : X. Px — > P'(fx). Composition of predicate 
morphisms is given by (g,g~) o (/,/~) = (go /, Xxp. g~(fx)(f~xp)). 

Diagrammatically, we have 



As the diagram indicates, the notion of a morphism from P to P' does not require the sets 
of proofs P x and P' (f x), for any x € X, to be equal. Instead, it requires only the existence 
of a function /~ which maps, for each x, each proof in P x to a proof in P' (f x). We denote 
by U : V — >• Set the forgetful functor mapping each predicate P : X — > Set to its domain 
X and each predicate morphism (/, /~) to /. 

An alternative to Definition 13.21 would take the category of predicates to be the arrow 
category over Set, but the natural lifting in this setting does not indicate how to generalise 
liftings to other fibrations. Indeed, if properties are modelled as functions, then every 
functor can be applied to a property, and hence every functor can be its own lifting. In the 
general fibrational setting, however, properties are not necessarily modelled by functions, 
so a functor cannot, in general, be its own lifting. The decision not to use arrow categories 
to model properties is thus dictated by our desire to lift functors in a way that indicates 
how liftings can be constructed in the general fibrational setting. 

We can now give a precise definition of a lifting. 

Definition 3.3. Let F be a functor on Set. A lifting of F from Set to V is a functor F on 
V such that the following diagram commutes: 



X 



f 



X' 




Set 



V 



F 



V 



u 



u 



Set 



Set 



F 



We can decode the definition of F as follows. The object part of F must map each predicate 
P : X — > Set to a predicate FP :FI-> Set, and thus can be thought of type-theoretically 
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as a function V(A : Set). (A — > Set) — > FX — >• Set. Of course, P must also act on 
morphisms in a functorial manner. 

We can now use the definition of a lifting to derive the standard induction rule from 
Section [2] for Nat as follows. 

Example 1. The data type of natural numbers is /j,N where N is the functor on Set defined 
by NX = 1 + X. A lifting N of N can be defined by sending each predicate P : X — > Set 
to the predicate NP : NX — > Set given by 

NP(inl-) = 1 
NP(inrn) = Pn 

An A-algebra with carrier P : Nat — > Set can be given by in : 1 + iVai — > iVai and 
in~ : Vi : 1 + Nat. NPt — > P(in t). Since in (inl •) = and in (inrn) = n + 1, we see that 
consists of an element h\ : PQ and a function /12 : Vra : Nat. Pn — > P (n+ 1). Thus, the 
second component m~ of an A-algebra with carrier P : Nat — > Set and first component in 
gives the premises of the familiar induction rule in Example [TJ 

The notion of predicate comprehension is a key ingredient of our lifting. It begins to 
explain, abstractly, what the use of X-types is in the theory of induction, and is the key 
construct allowing us to define liftings for non-polynomial, as well as polynomial, functors. 

Definition 3.4. Let P be a predicate on X. The comprehension of P, denoted {P}, is the 
type Ex : X.Px comprising pairs (x,p) where x : X and p : Px. The map taking each 
predicate P to {P}, and taking each predicate morphism (/, /~) : P — > P' to the morphism 
{(/, /~)} : {P} — >• {P 1 } defined by {(/, f~)}(x,p) = (fx, f~xp), defines the comprehension 
functor {—} from V to Set. 

We are now in a position to define liftings uniformly for all functors: 

Definition 3.5. If F is a functor on Set, then the lifting F is the functor on V given as 
follows. For every predicate P on A, FP : FX — > Set is defined by F P = (Firp)^ 1 , 
where the natural transformation tt : {— } —> U is given by rrp (x,p) = x. For every predicate 
morphism / : P ->• P', Ff = (k, fc~) where k = FUf, and AT : Vy : FX. FPy ->■ FP' (k y) 
is given by &f° y 2 = 

In the above definition, note that the inverse image f^ 1 of / : X Y is indeed a predicate 
P :Y -)■ Set. Thus if P is a predicate on X, then vr P : {P} ^ A" and Ftt p : P{P} -> PA. 
Thus FP is a predicate on PA, so P is a lifting of P from Set to V . The lifting P captures 
an "all" modality, in that it generalises Haskell's all function on lists to arbitrary data 
types. A similar modality is given in [17J for indexed containers. 

The lifting in Example Q] is the instantiation of the construction in Definition 13.51 to 
the functor AA = 1 + X on Set. Indeed, if P is any predicate, then N P = (Nirp)^ 1 , 
i.e., N P = (id + np)~ l . Then, since the inverse image of the coproduct of functions is the 
coproduct of their inverse images, since id~ 1 1 = 1, and since 7Tp n = {(n,p) \ p : Pn} for 
all n, we have N P (inl ■) = 1 and NP(inrn) = Pn. As we will see, a similar situation 
to that for Nat holds in general: for any functor P on Set, the second component of an 
P-algebra whose carrier is the predicate P on the data type fiF and whose first component 
is in gives the premises of an induction rule that can be used to show that P holds for all 
data of type fj,F. 
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The rest of this section shows that F-algebras with carrier {P} are interderivable with 
F-algebras with carrier P, and then uses this result to derive our induction rule. 

Definition 3.6. The functor K\ : Set — > V maps each set X to the predicate K\X = Xx : 
X. 1 on X and each / : X — > Y to the predicate morphism (/, Xx : X. id). 

The predicate K\X is called the truth "predicate on X. For every x : X, the set K\Xx of 
proofs that K\X holds for x is a singleton, and thus is non-empty. We intuitively think of 
a predicate P : X — > Set as being true if Px is non-empty for every x : X. We therefore 
consider P to be true if there exists a predicate morphism from K\X to P whose first 
component is idx- For any functor F, the lifting F is truth-preserving, i.e., F maps the 
truth predicate on any set X to that on FX. 

Lemma 3.7. For any functor F on Set and any set X , F(K\X) = K\(FX). 

Proof. By Definition 13. 5| F{K\X) = (Fttk 1 x)~' 1 ■ We have that ~kk x X is an isomorphism 
because there is only one proof of K\X for each x : X, and thus that Fttk-iX is an isomor- 
phism as well. As a result, (F ttk 1 x)^ 1 maps every y : FX to a singleton set, and therefore 
F{K X X) = (Ftt^x)- 1 ^Xy:FX.l = K X (FX). □ 

The fact that K\ is a left-adjoint to {— } is critical to the constructions below. This is 
proved in |10| ; we include its proof here for completeness and to establish notation. The 
description of comprehension as a right adjoint can be traced back to Lawvere |14j . 

Lemma 3.8. K\ is left adjoint to {—}. 

Proof. We must show that, for any predicate P and any set Y, the set V(KiY,P) of 
morphisms from K{Y to P in V is in bijective correspondence with the set Set(Y, {P}) 
of morphisms from Y to {P} in Set. Define maps (— )t : Set(Y, {P}) — > V{K\Y,P) and 
{-)* : V{K X Y,P) -> Set(T,{P}) by h) = (hi,h 2 ) where hy = (v,p), h x y = v and h 2 y = p, 
and (k, = X(y : Y). (ky, k~y). These give a natural isomorphism between Set(Y, {P}) 
and viK^P). □ 

Naturality of (— ) * ensures that (50/) t = g^oKxf for all / : Y' -> Y and g : Y -> {P}. 
Similarly for (— Moreover, id) is the counit, at P, of the adjunction between K\ and 
{— }. These observations are used in the proof of Lemma l3.101 Lemmas 13.91 and 13.101 are the 
key results relating F-algebras and F algebras, i.e., relating iteration and induction. They 
are special cases of Theorem 14.81 below, but we include their proofs to ensure continuity of 
our presentation and to ensure that this section is self-contained. 

We first we show how to construct F-algebras from F-algebras 

Lemma 3.9. There is a functor $ : Alg F — > Algp such that if k : FX — > X, then 
§k : F{KiX) -»■ K X X. 

Proof. For an F-algebra k : FX — > X define <&k = K\k, and for two F-algebras k : FX — > X 
and k' : FX' — > X' and an F-algebra morphism h : X — > X' between them define the F- 
algebra morphism <t>/i : <&k ->■ $k' by $/i = K\h. Then Ki(FX) = F(KiX) by Lemma IBTTl 
so that $/c is an F-algebra and K\h is an F-algebra morphism. It is easy to see that $ 
preserves identities and composition. □ 
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We can also construct F-algebras from F-algebras. 

Lemma 3.10. The functor <I> has a right adjoint ^ such that if j : FP — > P, then : 

/•{/'! -> !/'}• 

Proof. We construct the adjoint functor \& : Alg p —¥ Alg F as follows. Given an F-algebra 
j : FP -»• P, we use the fact that F(Fi{P}) ^ Fi(F{P}) by Lemma E21 to define 

: F{P} — > {P} by vfj = (j o Fid')*. To specify the action of ^ on an F-algebra 
morphism h, define = {h}. Clearly ^ preserves identity and composition. 

Next we show $H$, i.e., for every F-algebra k : FX X and F-algebra j : FP — > P 
with P a predicate on X, there is a natural isomorphism between F-algebra morphisms 
from k to tyj and F-algebra morphisms from <3?A; to j. We first observe that an F-algebra 
morphism from k to SSfj is a map from X to {P}, and an F-algebra morphism from &k 
to j is a map from K\X to P. A natural isomorphism between such maps is given by the 
adjunction K\ H { — } from Lemma 13.81 We must check that f : X — > {P} is an F-algebra 
morphism from k to tyj iff /' : K\X — > P is an F-algebra morphism from &k to j. 

To this end, assume f : X —> {P} is an F-algebra morphism from k to i.e., assume 
f ok = tyjoFf. We must prove that /' o $fe = joFf'. By the definition of $ in Lemma [3. 91 
this amounts to showing /"I" oK\k = j oFf'. Now, since (— )' is an isomorphism, / is an F- 
algebra morphism iff (/o fe) t = (tyjoFfy. Naturality of (—)' ensures that (f°k)' = f'oK\k 
and that (#7 o F/)t = (*j)t o K^Ff), so the previous equality holds iff 

foK x k = (*i)+o^(F/) (3.1) 

But 

J o F/t 

= jo Fid^ o Fx/) by naturality of (— )t and f = ido f 

= (j o F id') o F(Kif) by the functoriality of F 

= (*j)t o Ki(Ff) by the definition of the fact that (-)t and (-) # 

are inverses, and Lemma 13.71 
= f> o Kik by Equation 13.11 

Thus, /' is indeed an F-algebra morphism from Qk to j. □ 

Lemma f3.10l ensures that F-algebras with carrier {F} are interderivable with F-algebras 
with carrier P. For example, the iV-algebra [a, /3] with carrier {F} from Section [2] can be 
derived from the iV-algebra with carrier P given in Example [TJ Since we define a lifting 
F for any functor F, Lemma 13.101 thus shows how to construct F-algebras with carrier 
Sx : /iF. Px for any functor F and predicate P on (iF. 

Corollary 3.11. For any functor F on Set, the predicate Ki(fiF) is the carrier of the 
initial F-algebra. 

Proof. Since $ is a left adjoint it preserves initial objects, so applying <3? to the initial 
F-algebra in : F(fiF) — > fiF gives the initial F-algebra. By Lemma 13. 9\ $ in has type 
F(Ki(fj,F)) — > K±(fiF), so the carrier of the initial F-algebra is Fi(/iF). □ 
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We can now derive our generic induction rule. For every predicate P on X and every F- 
algebra (k, : FP — >■ P, Lemma [3. 101 ensures that \& constructs from (k, fc~) an F-algebra 
with carrier {P}. Applying the iteration operator to this algebra gives a map 

fold (*(jfe,Jfc~)) : uF -> {P} 

This map decomposes into two parts: <fi = irp o fold (\P (k,k~)) : fiF — > X and ip : V(i : 
fiF) . P ((f) t) . Initiality of in : F(uF) — >• ^F, the definition of ^, and the naturality of 7rp 
ensure = fold k. Recalling that ir'p is the second projection on dependent pairs involving 
the predicate P, this gives the following sound generic induction rule for the type X, which 
reduces induction to iteration: 

genind : V (F : Set ->■ Set) (P : X -> Set) ((k, fc~) : (FP -4 P)) (i : ^F). 

P (/oW fc t) 
genind F P = ir'p o /oW o ^ 

Notice this induction rule is actually capable of dealing with predicates over arbitrary sets 
and not just predicates over uF. However, when X = uF and k = in, initiality of in further 
ensures that 4> = fold in = id, and thus that genind specialises to the expected induction 
rule for an inductive data type [iF: 

ind : V (P : Set -4 Set) (P : fiF -t Set) ((k, fe~) : (FP -4 P)). 

(k = in) ->-V(i: fJ,F).Pt 
indF P = ir' p o fold o 

This rule can be instantiated to familiar rules for polynomial data types, as well as to ones 
we would expect for data types such as rose trees and finite hereditary sets, both of which 
lie outside the scope of Hermida and Jacobs' method. 

Example 2. The data type of rose trees is given in Haskell-like syntax by 

data Rose = Node(List Rose) 

The functor underlying Rose is FX = List X and its induction rule is 

indRose : V (P : Rose -> Set) ((jfe, fc~) : (FP P)). 

(A; = in) — > V(x : Rose). P x 
indRose F P = tt' p o fold o * 

Calculating PP = (P-7rp) _1 : P Pose — )■ Set, and writing xs !! A: for the k th component of a 
list xs, we have that 

PPrs 

= {z : F{P} | Fir p z = rs} 

= {cps : List {P} | List irp cps = rs} 

= {cps : List {P} | Vfc < length cps. irp (cps !! k) = rs !! k} 

An P-algebra whose underlying P-algebra is in : P Pose — > Pose is thus a pair of functions 
(in, fe~), where has type 

= Vrs : Z-isi Rose. 

{cps : List {P} | Vfc < length cps. rrp (cps !! fe) = rs !! fc} — >• P (Node rs) 
= Vrs : List Rose. (Vfc < length rs. P (rs !! &)) — > P(Node rs) 
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The last equality is due to surjective pairing for dependent products and the fact that 
length cps = length rs. The type of fc~ gives the hypotheses of the induction rule for rose 
trees. 

Although finite hereditary sets are defined in terms of quotients, and thus lie outside 
the scope of previously known methods, they can be treated with ours. 

Example 3. Hereditary sets are sets whose elements are themselves sets, and so are the 
core data structures within set theory. The data type HS of finitary hereditary sets is /iPf 
for the finite powerset functor Pt. We can derive an induction rule for finite hereditary 
sets as follows. If P : X — > Set, then Pf^p ■ Pf(T,x : X.Px) — > PfX maps each set 
{(xi,pi), . . . , (x n ,p n )} to the set {xi, . . . , x n }, so that (Pfirp)^ 1 maps a set {xi, . . . , x n } to 
the set Px\ x . . . x Px n . A Pj-algebra with carrier P : HS — > Set and first component in 
therefore has as its second component a function of type 

V({si, ...,s n }: Pf(HS)). P Sl x . . . x Ps n -»• P(in{s u . . . , s n }) 

The induction rule for finite hereditary sets is thus 

mdHS :: (V({si, . . . , s n } : P f {HS)). P Sl x...x Ps n -+ P(in{s u s n })) 
-> V(s : HS).Ps 

4. Generic Fibrational Induction Rules 

We can treat more general notions of predicates using fibrations. We motivate the use of 
fibrations by observing that i) the semantics of data types in languages involving recursion 
and other effects usually involves categories other than Set; ii) in such circumstances, the 
notion of a predicate can no longer be taken as a function with codomain Set; and iii) 
even when working in Set there are reasonable notions of "predicate" other than that in 
Section [3l (For example, a predicate on a set X could be a subobject of X). Moreover, 
when, in future work, we consider induction rules for more sophisticated classes of data 
types such as indexed containers, inductive families, and inductive recursive families (see 
Section [5]) , we will not want to have to develop an individual ad hoc theory of induction for 
each such class. Instead, we will want to appropriately instantiate a single generic theory of 
induction. That is, we will want a uniform axiomatic approach to induction that is widely 
applicable, and that abstracts over the specific choices of category, functor, and predicate 
giving rise to different forms of induction for specific classes of data types. 

Fibrations support precisely such an axiomatic approach. This section therefore gener- 
alises the constructions of the previous one to the general fibrational setting. The standard 
model of type theory based on locally cartesian closed categories does arise as a specific 
fibration — namely, the codomain fibration over Set — and this fibration is equivalent 
to the families fibration over Set. But the general fibrational setting is far more flexible. 
Moreover, in locally cartesian closed models of type theory, predicates and types coexist in 
the same category, so that each functor can be taken to be its own lifting. In the general fi- 
brational setting, predicates are not simply functions or morphisms, properties and types do 
not coexist in the same category, and a functor cannot be taken to be its own lifting. There 
is no choice but to construct a lifting from scratch. A treatment of induction based solely 
on locally cartesian closed categories would not, therefore, indicate how to treat induction 
in more general fibrations. 
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Another reason for working in the general fibrational setting is that this facilitates a 
direct comparison of our work with that of Hermida and Jacobs |10| . This is important, 
since their approach is the most closely related to ours. The main difference between 
their approach and ours is that they use fibred products and coproducts to define provably 
sound induction rules for polynomial functors, whereas we use left adjoints to reindexing 
functors to define provably sound induction rules for all inductive functors. In this section 
we consider situations when both approaches are possible and give mild conditions under 
which our results coincide with theirs when restricted to polynomial functors. 

The remainder of this section is organised as follows. In Section 14.11 we recall the 
definition of a fibration, expand and motivate this definition, and fix some basic terminology 
surrounding fibrations. We then give some examples of fibrations, including the families 
fibration over Set, the codomain fibration, and the subobject fibration. In Section [4.21 we 
recall a useful theorem from |10| that indicates when a truth-preserving lifting of a functor 
to a category of predicates has an initial algebra. This is the key theorem used to prove 
the soundness of our generic fibrational induction rule. In Section 14.31 we construct truth- 
preserving liftings for all inductive functors. We do this first in the codomain fibration, and 
then, using intuitions from its presentation as the families fibration over Set, as studied 
in Section [3l in a general fibrational setting. Finally, in Section 14.41 we establish a number 
of properties of the liftings, and hence of the induction rules, that we have derived. In 
particular, we characterise the lifting that generates our induction rules. 

4.1. Fibrations in a Nutshell. In this section we recall the notion of a fibration. More 
details about fibrations can be found in, e.g., |12}I20|. We begin with an auxiliary definition. 

Definition 4.1. Let U : £ — > B be a functor. 

(1) A morphism g : Q — > P in £ is cartesian over a morphism / : X — > Y in B if Ug = /, 
and for every g' : Q' — >• P in £ for which Ug' = f ov for some v : UQ' — > X there exists 
a unique h : Q' — > Q in £ such that Uh = v and g o h = g' . 

(2) A morphism g : P — > Q in £ is opcartesian over a morphism / : X — > Y in B if Ug = /, 
and for every g' : P — > Q' in £ for which Ug' = v o f for some v : Y — >■ UQ' there exists 
a unique h : Q — >• Q' in £ such that Uh = v and h o g = g' . 

It is not hard to see that the cartesian morphism /J> over a morphism / with codomain UP 
is unique up to isomorphism, and similarly for the opcartesian morphism ff. If P is an 
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object of £ , then we write f*P for the domain of /J> and SjP for the codomain of f§. We 
can capture cartesian and opcartesian morphisms diagrammatically as follows. 



U 




Cartesian morphisms (opcartesian morphisms) are the essence of fibrations (resp., opfi- 
brations). We introduce both fibrations and their duals now since the latter will prove useful 
later in our development. Below we speak primarily of fibrations, with the understanding 
that the dual observations hold for opfibrations. 

Definition 4.2. Let U : £ — > B be a functor. Then U is a fibration if for every object P 
of £ , and every morphism / : X — > UP in B there is a cartesian morphism fp-.Q^-Pm 
£ above /. Similarly, U is an opfibration if for every object P of £ , and every morphism 
/ : UP — > Y in B there is an opcartesian morphism ff : P — > Q in £ above /. A functor 
U a bifibration if it is simultaneously a fibration and an opfibration. 

If U : £ — > B is a fibration, we call B the base category of U and £ the total category 
of U. Objects of the total category £ can be thought of as properties, objects of the base 
category B can be thought of as types, and U can be thought of as mapping each property 
P in £ to the type UP of which P is a property. One fibration U can capture many different 
properties of the same type, so U is not injective on objects. We say that an object P in 
£ is above its image UP under U, and similarly for morphisms. For any object X of B, we 
write £x for the fibre above X, i.e., for the subcategory of £ consisting of objects above X 
and morphisms above id. If / : X — > Y is a morphism in B, then the function mapping 
each object P of £ to f*P extends to a functor /* : £y — > £x- Indeed, for each morphism 
k : P — > P' in £y, f*k is the morphism satisfying k o fp = fp, o f*k. The universal 

property of fp, ensures the existence and uniqueness of f*k. We call the functor /* the 
reindexing functor induced by f. A similar situation ensures for opfibrations, and we call 
the functor : £x — > £y which extends the function mapping each object P of £ to SjP 
the opreindexing functor. 

Example 4. The functor U : V — > Set defined in Section [3] is called the families fibration 
over Set. Given a function / : X — > Y and a predicate P : Y — > Set we can define a 
cartesian map fp whose domain f*P is P o /, and which comprises the pair (/, Ax : X. id). 
The fibre Vx above a set X has predicates P : X — > Set as its objects. A morphism in Vx 
from P : X — s- Set to P' : X — s- Set is a function of type Vx : X. Px — > P'x. 

Example 5. Let B be a category. The arrow category of B, denoted B~~*, has the morphisms, 
or arrows, of B as its objects. A morphism in B~* from / : X — > Y to /' : X' — > Y' is a pair 
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(01,02) of morphisms in B such that the following diagram commutes: 



A 



X' 



f 



r 



Y 



Y' 



i.e., such that 02 o / = /' o a\. It is easy to see that this definition indeed gives a category. 
The codomain functor cod : B^ — > B maps an object / : X — > Y of B~* to the object 

Y of B and a morphism (011,0:2) of B~^ to 02- If B has pullbacks, then cod is a fibration, 
called the codomain fibration over B. Indeed, given an object / : X — > Y in the fibre above 

Y and a morphism /' : X' — >• Y in the pullback of / along /' gives a cartesian morphism 
above /' as required. The fibre above an object Y of B has those morphisms of B that map 
into Y as its objects. A morphism in (B -> )y from / : A — > Y to /' : X' — > Y is a morphism 
oi : X — > X' in £> such that / = /' o a\. 

Example 6. If B is a category, then the category of subobjects of B, denoted Sub(B), has 
monomorphisms in B as its objects. A monomorphism / : X Y is called a subobject of 
Y. A morphism in Sub(B) from / : A ^4 Y to /' : A' ^ Y' is a pair of morphisms (01,02) 
in B such that 02 o / = /' o a%. 

The map U : Sub(B) — > B sending a subobject / : A Y to Y extends to a functor. If 
B has pullbacks, then U is a fibration, called the subobject fibration over B; indeed, pullbacks 
again give cartesian morphisms since the pullback of a monomorphism is a monomorphism. 
The fibre above an object Y of B has as objects the subobjects of Y. A morphism in 
Sub{B) Y from / : A <-> Y to /' : A' -4 Y is a map oi : A -4 A' in such that / = /'oo 1 . 
If such a morphism exists then it is, of course, unique. 

4.2. Lifting, Truth, and Comprehension. We now generalise the notions of lifting, 
truth, and comprehension to the general fibrational setting. We prove that, in such a setting, 
if an inductive functor has a truth-preserving lifting, then its lifting is also inductive. We 
then see that inductiveness of the lifted functor is sufficient to guarantee the soundness 
of our generic fibrational induction rule. This subsection is essentially our presentation of 
pre-existing results from [10j . We include it because it forms a natural part of our narrative, 
and because simply citing the material would hinder the continuity of our presentation. 

Recall from Section [3] that the first step in deriving an induction rule for a datatype 
interpreted in Set is to lift the functor whose fixed point the data type is to the category V of 
predicates. More specifically, in Definition 13 . 31 we defined a lifting of a functor F : Set — > Set 
to be a functor F :V V such that UF = FU. We can use these observations to generalise 
the notion of a lifting to the fibrational setting as follows. 

Definition 4.3. Let U : £ — > B be a fibration and F be a functor on B. A lifting of F with 
respect to U is a functor F : £ — > £ such that the following diagram commutes: 



£ 



F 



£ 



u 



V 



B ^B 

F 
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In Section [3] we saw that if P : X — > Set is a predicate over X, then FP is a predicate over 
FX. The analogous result for the general fibrational setting observes that if F is a lifting 
of F and X is an object of B, then F restricts to a functor from Ex to £fx- 

By analogy with our results from Section [3J we further expect that the premises of a 
fibrational induction rule for a datatype fxF interpreted in B should constitute an F-algebra 
on £. But in order to construct the conclusion of such a rule, we need to understand how 
to axiomatically state that a predicate is true. In Section (3J a predicate P : X — >• Set is 
considered true if there is a morphism in V from K\X, the truth predicate on X, to P that 
is over idx- Since the mapping of each set X to K\X is the action on objects of the truth 
functor K\ : Set — > V (cf. Definition 13. 6p . we actually endeavour to model the truth functor 
for the families fibration over Set axiomatically in the general fibrational setting. 

Modeling the truth functor axiomatically amounts to understanding its universal prop- 
erty. Since the truth functor in Definition 13.61 maps each set X to the predicate Xx : x. 1, for 
any set X there is therefore exactly one morphism in the fibre above X from any predicate 
P over X to K\ X. This gives a clear categorical description of K\ X as a terminal object 
of the fibre above X and leads, by analogy, to the following definition. 

Definition 4.4. Let U : £ — » B be a fibration. Assume further that, for every object 
X of B, the fibre Ex has a terminal object K\ X such that, for any / : X' — > X in B, 
f*{K\X) = K\X'. Then the assignment sending each object X in B to K\X in £, and 
each morphism / : X' — > X in B to the morphism f^x m ^ defines the (fibred) truth 
functor K\ : B — > £. 

The (fibred) truth functor is sometimes called the (fibred) terminal object functor. With 
this definition, we have the following standard result: 

Lemma 4.5. K\ is a (fibred) right adjoint for U. 

The interested reader may wish to consult the literature on fibrations for the definition 
of a fibred adjunction, but a formal definition will not be needed here. Instead, we can 
simply stress that a fibred adjunction is first and foremost an adjunction, and then observe 
that the counit of this adjunction is the identity, so that UK\ = Id. Moreover, K\ is full 
and faithful. One simple way to guarantee that a fibration has a truth functor is to assume 
that both £ and B have terminal objects and that U maps a terminal object of £ to a 
terminal object of B. In this case, the fact that reindexing preserves fibred terminal objects 
ensures that every fibre of £ indeed has a terminal object. 

The second fundamental property of liftings used in Section [3] is that they are truth- 
preserving. This property can now easily be generalised to the general fibrational setting 
(cf. Definition EZ]). 

Definition 4.6. Let U : £ — > B be a fibration with a truth functor K\ : B — > £, let F be 
a functor on B, and let F : £ — > £ be a lifting of F. We say that F is a truth-preserving 
lifting of F if, for any object X of B, we have F(KtX) ^ Kx{FX). 

The final algebraic structure we required in Section [3] was a comprehension functor 
{— } : V — > Set. To generalise the comprehension functor to the general fibrational setting 
we simply note that its universal property is that it is right adjoint to the truth functor K\ 
(cf. Definition [32]) • We single out for special attention those fibrations whose truth functors 
have right adjoints. 
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Definition 4.7. Let U : £ — > B be a fibration with a truth functor K\ : B 
a comprehension category with unit if K\ has a right adjoint. 



£. Then U is 



If C/ : £ — » £> is a comprehension category with unit, then we call the right adjoint to K\ 
the comprehension functor and denote it by { — }:£"—)• B. With this machinery in place, 
Hermida and Jacobs [10J show that if U is a comprehension category with unit and F is a 
truth-preserving lifting of F, then F is inductive if F is and, in this case, the carrier \xF of 
the initial F-algebra is K\ (fJ-F) . This is proved as a corollary to the following more abstract 
theorem. 



Theorem 4.8. Let F 

transformation a : GS - 



B — > B, G : A — > A, and S : B —> A be functors. A natural 
• SF, i.e., a natural transformation a such that 

G 




induces a functor 



Algi 



Alg, 



G 



given by (f : FX — > X) = S f o ax ■ Moreover, if a is an isomorphism, then a right 
adjoint T to S induces a right adjoint 

Algp _t_ Alg G 



given by ^/(g : GX — > X) = Tgoftx, where [3 : FT — >• TG is the image of G eoa^ 1 : SFT — > 
G under the adjunction isomorphism Hom(S X, Y) = Hom(X, TY), and e : ST — > id is 
the counit of this adjunction. 

We can instantiate Theorem 14.81 to generalise Lemmas 13.91 and 13.101 

Theorem 4.9. Let U : £ —> B be a comprehension category with unit and F : B — > B be a 
functor. If F has a truth-preserving lifting F then there is an adjunction <3? H ^ : Alg F — > 
Algp. Moreover, if f : FX -> X then $/ : F{KiX) ->• K X X, and if g : FP -> P then 

Proof. We instantiate Theorem 14.81 letting £ be A, F be G, and K\ be S. Then a is an 
isomorphism since F is truth-preserving, and we also have that K\ H {— }. The theorem thus 
ensures that $ maps every F-algebra / : FX — > X to an F-algebra : F(K\X) — > K\X, 
and that ^ maps every F-algebra g : FP — > P to an F-algebra *&g : F{P} — > {P}. □ 

Corollary 4.10. Let U : £ — > B be a comprehension category with unit and F : B — > B be 

a functor which has a truth-preserving lifting F. If F is inductive, then so is F. Moreover, 
nF = K 1 ( f iF). 

Proof. The hypotheses of the corollary place us in the setting of Theorem l4.91 This theorem 
guarantees that <3? maps the initial F-algebra inp : F(/j,F) — > [iF to an i^-algebra with 
carrier Ki(fiF). But since left adjoints preserve initial objects, we must therefore have that 
the initial F-algebra has carrier Ki(fiF). Thus, fiF exists and is isomorphic to K\{ijlF).\Z\ 
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Theorem 4.11. Let U : £ — > B be a comprehension category with unit and F : B — > B 
be an inductive functor. If F has a truth-preserving lifting F , then the following generic 
fibrational induction rule is sound: 

genfibind : V (F : B B) (P : S). (F P ->• P) -)• (jd? -> P) 

genfibind F P = fold 

An alternative presentation of genfibind is 

genfibind : V (F : B ^ B) {P : £). {F P ^ P) ^ (fiF -> {P}) 

genfibind F P = fold o ^ 

We call genfibind F the generic fibrational induction rule for //P. 

In summary, we have generalised the generic induction rule for predicates over Set 
presented in Section [3] to give a sound generic induction rule for comprehension categories 
with unit. Our only assumption is that if we start with an inductive functor F on the 
base of the comprehension category, then there must be a truth-preserving lifting of that 
functor to the total category of the comprehension category. In that case, we can specialise 
genfibind to get a fibrational induction rule for any datatype fiF that can be interpreted in 
the fibration's base category. 

The generic fibrational induction rule genfibind does, however, look slightly different 
from the generic induction rule for set-valued predicates. This is because, in Section El we 
used our knowledge of the specific structure of comprehensions for set-valued predicates 
to extract proofs for particular data elements from them. But in the fibrational setting, 
predicates, and hence comprehensions, are left abstract. We therefore take the return type 
of the general induction scheme genfibind to be a comprehension with the expectation that, 
when the general theory of this section is instantiated to a particular fibration of interest, it 
may be possible to use knowledge about that fibration to extract from the comprehension 
constructed by genfibind further proof information relevant to the application at hand. 

As we have previously mentioned, Hermida and Jacobs provide truth-preserving liftings 
only for polynomial functors. In Section \A.3\ we define a generic truth-preserving lifting for 
any inductive functor on the base category of any fibration which, in addition to being a 
comprehension category with unit, has left adjoints to all reindexing functors. This gives a 
sound generic fibrational induction rule for the datatype fj,F for any functor F on the base 
category of any such fibration. 

4.3. Constructing Truth-Preserving Liftings. In light of the previous subsection, it is 
natural to ask whether or not truth-preserving liftings exist. If so, are they unique? Or, if 
there are many truth-preserving liftings, is there a specific truth-preserving lifting to choose 
above others? Is there, perhaps, even a universal truth-preserving lifting? We can also ask 
about the algebraic structure of liftings. For example, do truth-preserving liftings preserve 
sums and products of functors? 

Answers to some of these questions were given by Hermida and Jacobs, who provided 
truth-preserving liftings for polynomial functors. To define such liftings they assume that 
the total category and the base category of the fibration in question have products and 
coproducts, and that the fibration preserves them. Under these conditions, liftings for 
polynomial functors can be defined inductively. In this section we go beyond the results of 
Hermida and Jacobs and construct truth-preserving liftings for all inductive functors. We 
employ a two-stage process, first building truth-preserving liftings under the assumption 
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that the fibration of interest is a codomain fibration, and then using the intuitions of 
Section [3] to extend this lifting to a more general class of flbrations. In Section 14.41 we 
consider the questions from the previous paragraph about the algebraic structure of liftings. 

4.3.1. Truth- Preserving Liftings for Codomain Fibrations. Recall from Example [5] that if B 
has pullbacks, then the codomain fibration over B is the functor cod : B^ —¥ B. Given a 
functor F : B ^ B, it is trivial to define a lifting F^ : B^ — > B^ for this fibration. We can 
define the functor F~^ to map an object / : X — > Y of B^ to Ff : FX — > FY, and to map 
a morphism (01,02) to the morphism {Fa\,Fa2)- That F^ is a lifting is easily verified. 

If we further verify that codomain fibrations are comprehension categories with unit, 
and that the lifting F^ is truth-preserving, then Theorem 14.111 can be applied to them. For 
the former, we first observe that the functor K\ : B — > B~^ mapping an object X to id and 
a morphism / : X — > Y to (/, /) is a truth functor for this fibration. (In fact, we can take 
any isomorphism into X as K\X\ we will use this observation below.) If we let B^(U,V) 
denote the set of morphisms from an object U to an object V in B~^ , then the fact that K\ 
is right adjoint to cod can be established via the natural isomorphism 

B^(f :X^Y, K X Z) = {(ai : X -> Z, o 2 : Y -> Z) | c*i = o 2 o /} B{Y, Z) = B(cod f, Z) 

We next show that the functor dom : B~^ — > B mapping an object / : X — > Y of B^ to 
X and a morphism (01,02) to a\ is a comprehension functor for the codomain fibration. 
That dom is right adjoint to K\ is established via the natural isomorphism 

B~*(KxZ, f:X->Y) = {(a x : Z ^ X,a 2 :Z^Y)\a 2 =foa x } B(Z,X) = B{Z, dom f) 

Finally, we have that F~* is truth-preserving because 

F^{K X Z) = F^ id = F id = id = K X {FZ) 

A lifting is implicitly given in [16] for functors on a category with display maps. Such 
a category is a subfibration of the codomain fibration over that category, and the lifting 
given there is essentially the lifting for the codomain fibration restricted to the subfibration 
in question. 

4.3.2. Truth-Preserving Liftings for the Families Fibration over Set. In Section [3] we de- 
fined, for every functor F : Set — > Set, a lifting F which maps the predicate P to (-F^p) -1 . 
Looking closely, we realise this lifting decomposes into three parts. Given a predicate P, 
we first consider the projection function np : {P} — > UP. Next, we apply the functor F 
to TTp to obtain Fttp : F{P} — > FUP. Finally, we take the inverse image of Firp to get a 
predicate over FUP as required. 

Note that tt is the functor from V to Set^ which maps a predicate P to the projection 
function np : {P} — > UP (and maps a predicate morphism (/, /~) from a predicate P : X —■ 
Set to P' : X' -> Set to the morphism ({(/, /~)}, /) from vr P to vr P /; cf. Definition [31} • If 
I : Set^ — > V is the functor sending a function / : X — > Y to its "inverse" predicate / _1 
(and a morphism (01,02) to the predicate morphism (a 2 ,\/y : Y. Xx : f~ l y. ot\x)), then 
each of the three steps of defining F is functorial and the relationships indicated by the 
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following diagram hold: 



TT 



T 



^Set 




Set 



Note that the adjunction / H ir is an equivalence. This observation is not, however, 
necessary for our subsequent development; in particular, it is not needed for Theorem 14.141 

The above presentation of the lifting F of a functor F for the families fibration over Set 
uses the lifting of F for the codomain fibration over Set. Indeed, writing F^ for the lifting 
of F for the codomain fibration over Set, we have that F = IF^ir. Moreover, since ir and 
I are truth-preserving (see the proof of Lemma 13. 7p , and since we have already seen that 
liftings for codomain fibrations are truth-preserving, we have that F is truth-preserving 
because each of its three constituent functors is. Finally, since we showed in Section [3] that 
the families fibration over Set is a comprehension category with unit, Theorem 14. 1 1 1 can be 
applied to it. 

Excitingly, as we shall see in the next subsection, the above presentation of the lifting 
of a functor for the families fibration over Set generalises to many other fibrations! 

4.3.3. Truth- Preserving Liftings for Other Fibrations. We now turn our attention to the 
task of constructing truth-preserving liftings for fibrations other than codomain fibrations 
and the families fibration over Set. By contrast with the approach outlined in the conference 
paper [9j on which this paper is based, the one we take here uses a factorisation, like that 
of the previous subsection, through a codomain fibration. More specifically, let U : £ — > B 
be a comprehension category with unit. We first define functors / and ir, and construct an 
adjunction I H ir between £ and B~^ such that the relationships indicated by the following 
diagram hold: 



We then use the adjunction indicated in the diagram to construct truth-preserving a lifting 
for U from that for the codomain fibration over B. 

To define the functor ir : 8 — > B~^ we generalise the definition of ir : V — > Set^ 
from Sections [3] and 14.3.21 This requires us to work with the axiomatic characterisation in 
Definition 14.71 of the comprehension functor {— } : £ — > B as the right adjoint to the truth 
functor K\ : B — > £. The counit of the adjunction K\ H {— } is a natural transformation 
e : Ki{— } — > Id. Applying U to e gives the natural transformation Ue : UK\{—} — > U, but 
since UK\ = Id, in fact we have that Ue : {— } — > U. We can therefore define 7r to be Ue. 
Then it is indeed a functor from £ to B~^ , its action on an object P is irp, and its action 
on a morphism (/, /~) is ({(/,/~)}, /)• 

We next turn to the definition of the left adjoint / to ir. To see how to generalise the 
inverse image construction to more general fibrations we first recall from Example [4] that, if 
/ : X — > Y is a function and P : Y — >• Set, then f*P = P o f. We can extend this mapping 



TT 




B 
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to a reindexing functor f*:£y—>- £x by denning f*(id, = (id, hT o /). If we define the 
action of Sj : £x — > £y on objects by 

S/P = Ay. |+J Px 

{aj|/a:=y} 

where (+J denotes the disjoint union operator on sets, and its action on morphisms by taking 
£/(ie?,o~) to be (id, V(y : Y). A(x : X,p : fx = y,t : Px).(x,p,a~ xt)), then is left 
adjoint to /*. Moreover, if we compute 

E f (K!X) = Xy. 1+J K x Xx 

{x \fx=y} 

and recall that, for any x : X, the set K\Xx is a singleton, then Tif(K\X) is clearly 
equivalent to the inverse image of /. 

The above discussion suggests that, in order to generalise the inverse image construction 
to a more general fibration U : £ — > B, we should require each reindexing functor /* to have 
the opreindexing functor Sj as its left adjoint. As in |10j . no Beck-Chevalley condition is 
required on these adjoints. The following result, which appears as Proposition 2.3 of 
thus allows us to isolate the exact class of fibrations for which we will have sound generic 
induction rules. 

Theorem 4.12. A fibration U : £ — > B is a bifibration iff for every morphism f in B the 
reindexing functor f* has left adjoint £/. 

Definition 4.13. A Lawvere category is a bifibration which is also a comprehension category 
with unit. 

We construct the left adjoint / : — > £ of ir for any Lawvere category U : £ — > B as 
follows. If / : X — > Y is an object of B~*, i.e., a morphism of B, then we define I f to be the 
object Yif(K\X) of £. To define the action of I on morphisms, let (01,02) be a morphism 
in B~^ from / : X — > Y to /' : X' — >■ Y' in B~*. Then (01,02) is a pair of morphisms in B 
such that the following diagram commutes: 

X — -U- X' 

f 

Y **Y' 

We must construct a morphism from T,f(K\X) to Y,f(KiX') in £. To do this, notice 
that fi KlX o K\a\ : K\X — > T^fr(KiX') is above f'oa\, and that it is also above 02 / 
since f'oa\ = 02 /• We can then consider the morphism f§ KlX o K\ct\ and use the 

TV- TjT- 

universal property of the opcartesian morphism fo 1 to deduce the existence of a morphism 
h : T,j(KiX) — > Y,fi(K\X') above 02- It is not difficult, using the uniqueness of the 
morphism h, to prove that setting this h to be the image of the morphism (01,02) makes 
/ a functor. In fact, since cod o n = U, Result (i) on page 190 of [11] guarantees that, 
for any Lawvere category U : £ —> B the functor I : B~* — > £ exists and is left adjoint to 
ir:£^B^. 



We can now construct a truth-preserving lifting for any Lawvere category U : £ — » B 
and functor F on B. 
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Theorem 4.14. Let U : £ — )■ B be a Lawvere category and, for any functor F on B, define 
the functor F on £ by 

F : £^£ 

F = IF^TT 

Then F is a truth-preserving lifting of F. 

Proof. It is trivial to check that F is indeed a lifting. To prove that it is truth-preserving, we 
need to prove that F(K\X) = K\{FX) for any functor F on B and object X of B. We do 
this by showing that each of n, F~*, and I preserves fibred terminal objects, i.e., preserves 
the terminal objects of each fibre of the total category which is its domain. Then since 
K\X is a terminal object in the fibre £x, we will have that F(K\X) = I (F^ (tt(KiX))) is 
a terminal object in £fx, i-e., that F{K\X) = K\{FX) as desired. 

We first show that tt preserves fibred terminal objects. We must show that, for any 
object X of B, ttkiX is a terminal object of the fibre of over X, i.e., is an isomorphism 
with codomain X. We prove this by observing that, if rj : Id — > {— }K\ is the unit of 
the adjunction K\ H {— }, then ttk 1 x is an isomorphism with inverse rjx- Indeed, if e 
is the counit of the same adjunction, then the facts that UK\ = Id and that K\ is full 
and faithful ensure that K\rjx is an isomorphism with inverse €k 1 x- Thus, €k 1 x is an 
isomorphism with inverse K\rjx, and so ttkiX = UexiX is an isomorphism with inverse 
UKinx, i-e., with inverse rjx- Since K\X is a terminal object in £x and txk x x is a terminal 
object in the fibre of B~^ over X, we have that tt preserves fibred terminal objects. 

It is not hard to see that F^ preserves fibred terminal objects: applying the functor F 
to an isomorphism with codomain X — i.e., to a terminal object in the fibre of B~^ over 
X — gives an isomorphism with codomain FX — i.e., a terminal object in the fibre of B^ 
over FX. 

Finally, if / : X — > Y is an isomorphism in B, then Y,f is not only left adjoint to /*, 
but also right adjoint to it. Since right adjoints preserve terminal objects, and since K\X 
is a terminal object of fx, we have that If = T,f(KiX) is a terminal object of £y . Thus I 
preserves fibred terminal objects. □ 

We stress that, to define our lifting, the codomain functor over the base B of the Lawvere 
category need not be a fibration. In particular, B need not have pullbacks; indeed, all that 
is needed to construct our generic truth-preserving lifting F for a functor F on B is the 
existence of the functors I and tt (and F~*, which always exists). We nevertheless present 
the lifting F as the composition of tt, F~^, and / because this presentation shows it can be 
factored through F~* . This helps motivate our definition of F, thereby revealing parallels 
between it and F^ that would otherwise not be apparent. At the same time it trades the 
direct, brute-force presentation of F from [9] for an elegant modularly structured one which 
makes good use, in a different setting, of general results about comprehension categories 
due to Jacobs [11] . 

We now have the promised sound generic fibrational induction rule for every inductive 
functor F on the base of a Lawvere category. To demonstrate the flexibility of this rule, we 
now derive an induction rule for a data type and properties on it that cannot be modelled 
in Set. Being able to derive induction rules for fixed points of functors in categories other 
than Set is a key motivation for working in a general fibrational setting. 

Example 7. The fixed point Hyp = fiF of the functor FX = (X — > Int) — > Int is the data 
type of hyperfunctions. Since F has no fixed point in Set, we interpret it in the category 
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ojCPO± of w-cpos with _L and strict continuous monotone functions. In this setting, a 
property of an object X of uCPO± is an admissible sub-u>CPO± P of X. Admissibility 
means that the bottom element of X is in P and P is closed under least upper bounds of 
w-chains in X. This structure forms a Lawvere category [lit I12j; in particular, it is routine 
to verify the existence of its opreindexing functor. In particular, XjP is constructed for a 
continuous map / : X — > Y and an admisible predicate PCX, as the intersection of all 
admissible Q CY with P C f~ 1 {Q). The truth functor maps X to X, and comprehension 
maps a sub-u;CPO± P of X to P. The lifting F maps a svib-uiCPO± P of X to the least 
admissible predicate on FX containing the image of FP. Finally, the derived induction 
rule states that if P is an admissible sub-wCPOj_ of Hyp, and if F(P) C P, then P = -Hyp. 

4.4. An Algebra of Lifting. We have proved that in any Lawvere category U : £ — > B, 
any functor P on B has a lifting P on £ which is truth-preserving, and thus has the following 
associated sound generic fibrational induction rule: 

genfibind : V (P : B B) (P : £ ). (FP -> P) -»• (//P -> {P}) 

genfibind F P = fold o ^/ 

In this final subsection of the paper, we ask what kinds of algebraic properties the lifting 
operation has. Our first result concerns the lifting of constant functors. 

Lemma 4.15. Let U : £ — > B be a Lawvere category and let X be an object of B. If Fx is 
the constantly X -valued functor on B, then Fx is isomorphic to the constantly K\X -valued 
functor on £. 

Proof. For any object P of £ we have 

FxP = (/(Px)^vr)P = /(Pxvrp) = S^F^F^P} = T.^X K X X 

The last isomorphism holds because id* = Id and Y^d H id* . □ 

Our next result concerns the lifting of the identity functor. It requires a little additional 
structure on the Lawvere category of interest. 

Definition 4.16. A full Lawvere category is a Lawvere category U : £ — > B such that 
7T : £ — > B~~* is full and faithful. 

Lemma 4.17. In any full Lawvere category, Id = Id 

Proof. By the discussion following Definition I4.13( I -\ ir. Since ir is full and faithful, the 
counit of this adjunction is an isomorphism, and so Inp = P for all P in £ . We therefore 
have that 

P^Ittp = E np Kt{P} = Y> Id „ p K x {Id {P}) = (IldT* tt)P = TdP 

i.e., that Id P = P for all P in £. Because these isomorphisms are clearly natural, we 
therefore have that Id = Id. □ 
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We now show that the lifting of a coproduct of functors is the coproduct of the liftings. 

Lemma 4.18. Let U : 8 — > B be a Lawvere category and let F and G be functors on B. 
Then fTG ^F + G. 

Proof. We have 

(F + G)P = I((F + G)^7T P ) = I(F^it p + G^irp) I(F^ttp) + I(G^irp) = FP + GP 
The third isomorphism holds because / is a left adjoint and so preserves coproducts. □ 

Note that the statement of Lemma 14.181 does not assert the existence of either of the 
two coproducts mentioned, but rather that, whenever both do exist, they must be equal. 
Note also that the lemma generalises to any colimit of functors. Unfortunately, no result 
analogous to Lemma f4. 181 can yet be stated for products. 

Our final result considers whether or not there is anything fundamentally special about 
the lifting we have constructed. It is clearly the "right" lifting in some sense because it 
gives the expected induction rules. But other truth-preserving liftings might also exist and, 
if this is the case, then we might hope our lifting satisfies some universal property. In 
fact, under a further condition, which is also satisfied by all of the liftings of Hermida and 
Jacobs, and which we therefore regard as reasonable, we can show that our lifting is the only 
truth-preserving lifting. Our proof uses a line of reasoning which appears in Remark 2.13 
in [IB]. 

Lemma 4.19. Let U : 6 — >• B be a full Lawvere category and let OF be a truth-preserving 
lifting of a functor F on B. If OF preserves Ti-types — i.e., if (OF)(Y,fP) = 'Spf(OF)P 
— then OF = F. 

Proof. We have 

(OF)P (OF)(fdP) 

- (□F)(S^ P K 1 {P}) 
Zp^iOF^iP} 
* T 1 p 7Tp K\F{P} 

= FP □ 

Finally, we can return to the question of the relationship between the liftings of polynomial 
functors given by Hermida and Jacobs and the liftings derived by our methods. We have seen 
that for constant functors, the identity functor, and coproducts of functors our constructions 
agree. Moreover, since Hermida and Jacobs' liftings all preserve S-types, Lemma 14.191 
guarantees that in a full Lawvere category their lifting for products also coincides with 
ours. 

5. Conclusion and future work 

We have given a sound induction rule that can be used to prove properties of data structures 
of inductive types. Like Hermida and Jacobs, we give a fibrational account of induction, 
but we derive, under slightly different assumptions on fibrations, a generic induction rule 
that can be instantiated to any inductive type rather than just to polynomial ones. This 
rule is based on initial algebra semantics of data types, and is parameterised over both 
the data types and the properties involved. It is also principled, expressive, and correct. 
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Our derivation yields the same induction rules as Hermida and Jacobs' when specialised to 
polynomial functors in the families fibration over Set and in other fibrations, but it also 
gives induction rules for non-polynomial data types such as rose trees, and for data types 
such as finite hereditary sets and hyperfunctions, for which no fibrational induction rules 
have previously been known to exist. 

There are several directions for future work. The most immediate is to instantiate our 
theory to give induction rules for more sophisticated data types, such as nested types. These 
are exemplified by the data type of perfect trees given in Haskell-like syntax as follows: 

data PTree a : Set where 
PLeaf : a — > PTree a 
PNode : PTree (a, a) — > PTree a 

Nested types arise as least fixed points of rank-2 functors; for example, the type of perfect 
trees is fiH for the functor H given by HF = XX. X + F(X x X). An appropriate fibration 
for induction rules for nested types thus takes B to be the category of functors on Set, 
£ to be the category of functors from Set to V, and U to be postcomposition with the 
forgetful functor from Section [3l A lifting H of H is given by H PX (inla) = 1 and 
H P X {inrn) = P (X x X) n. Taking the premise to be an if-algebra gives the following 
induction rule for perfect trees: 

indPTree : V {P : Set -> V). 

(UP = PTree) -> (V(X : Set) (a; : X). P (PLeaf x)) -> 

(Vpf : Set)(t : PTree (X x X).P(X x X)t -> P (PNode t))) -»• 

V(A : Set)(i : PTree X).PXt 

This rule can be used to show, for example, that PTree is a functor. 

Extending the above instantiation for the codomain fibration to so-called "truly nested 
types" [15] and fibrations is current work. We expect to be able to instantiate our theory for 
truly nested types, GADTs, indexed containers, dependent types, and inductive recursive 
types, but initial investigations show care is needed. We must ascertain which fibrations can 
model predicates on such types, since the codomain fibration may not give useful induction 
rules, as well as how to translate the rules to which these fibrations give rise to an intensional 
setting. 

Matthes [15] gives induction rules for nested types (including truly nested ones) in an 
intensional type theory. He handles only rank-2 functors that underlie nested types (while 
we handle any functor of any rank with an initial algebra) , but his insights may help guide 
choices of fibrations for truly nested types. These may in turn inform choices for GADTs, 
indexed containers, and dependent types. 

Induction rules can automatically be generated in many type theories. Within the 
Calculus of Constructions [I] an induction rule for a data type can be generated solely 
from the inductive structure of that type. Such generation is also a key idea in the Coq 
proof assistant [5]. As far as we know, generation can currently be done only for syntactic 
classes of functors rather than for all inductive functors with initial algebras. In some 
type theories induction schemes are added as axioms rather than generated. For example, 
attempts to generate induction schemes based on Church encodings in the Calculus of 
Constructions proved unsuccessful and so initiality was added to the system, thus giving the 
Calculus of Inductive Constructions. Whereas Matthes' work is based on concepts such as 
impredicativity and induction recursion rather than initial algebras, ours reduces induction 



GENERIC FIBRATIONAL INDUCTION 



27 



to initiality, and may therefore help lay the groundwork for extending implementations of 
induction to more sophisticated data types. 
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